37 Express Privacy Policy – Protection of Personal Data

Last Updated: 21/05/2025

At 37 Express, protecting your personal data is a priority. We are committed to respecting your rights and ensuring the security of your information. This privacy policy aims to inform you about how we collect, use, share, and protect your personal data. We also want to provide you with clear information about your rights regarding your personal data.

This policy applies to all personal data processed by 37 Express, whether you are a customer, user, or visitor of our website. It complies with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Who is responsible for processing your personal data?

The company responsible for processing your personal data is:

37Express

Address：43 Rue de la Haie Coq 93300 Aubervilliers

Phone：01 42 21 37 37

Email：support@37-express.com

2. What data do we collect and how do we collect it?

We primarily collect the following types of data:

• Identification data: Name, surname, address, email address, phone number (for senders and recipients).
• Payment data: Credit card or bank account information, for processing payment for shipping services.
• Connection data: IP address, browser type, pages viewed, duration of visit.
• Shipping-related data: Package content information, weight, dimensions, declared value, shipping preferences, shipment history.
• Package tracking data: Tracking number, package status, location, expected delivery dates.

Sources of collection：

• Directly from you when you fill out a form, register on our site, place an order, or contact us.
• Indirectly: We may obtain some information through third-party partners (e.g., payment providers, logistics partners, tracking services) or publicly available sources (social media, public websites).

3. Why do we collect your personal data?

We collect and process your personal data for the following purposes:

• Contract execution: To manage your order, create an account, process the shipping of packages, and ensure tracking of shipments.
• Compliance with legal obligations: To meet fiscal, accounting, or legal requirements.
• Marketing and communication: To send you promotional offers, newsletters, or other marketing communications, with your consent.
• Service improvement: To analyze the use of our services and improve the user experience.
• Fraud prevention and security: To detect and prevent fraud or malicious activity related to shipping.

4. Sharing your personal data with third-party partners

We share your personal data with the following entities:

• Carriers and logistics partners: We share your information with carriers (such as UPS, Chronopost, DPD, etc.) to process shipments and deliveries.
• Subcontractors: Our technical service providers (hosting, maintenance), logistics partners, payment services, marketing agencies, etc. These partners can only use your data to provide the services they offer.
• Commercial partners: With your prior consent, we may share your data with our commercial partners for targeted marketing campaigns.
• Public authorities: To comply with legal requirements or to protect our rights.

5. Package tracking and notifications

We use tracking data (tracking number, package status, location, etc.) to allow real-time tracking of packages. This data is shared with you via our platform or by email/SMS, to keep you informed of the status of your shipment.

6. Liability for lost, damaged, or stolen packages

As an intermediary in transport, 37 Express facilitates shipping through its logistics partners. However, liability for lost, damaged, or stolen packages may be shared between 37 Express and the carriers, depending on the terms of the contracts and the insurance chosen for each shipment.

If you purchase insurance for your shipments, the information related to that insurance will be used in accordance with the carrier's insurance policy.

7. Retention of personal data

Data is retained for as long as necessary to fulfill the purposes for which it was collected.

The following are the primary retention periods for data:

• Order management: Up to 3 years after your last order or interaction.
• User accounts: Up to 3 years after account deletion or your last login.
• Marketing: Up to 3 years after your last interaction or until you withdraw your consent.
• Shipping-related data: Retained for the necessary period to finalize shipment tracking and up to 1 year after the actual delivery.
• Accounting data: 10 years to meet fiscal and accounting obligations.

8. Securing your personal data

We implement appropriate technical and organizational measures to protect your personal data against loss, theft, or unauthorized access. These measures include:

• Encryption of sensitive data.
• Restricted access to personal data to authorized personnel only.
• Ongoing monitoring of systems to detect any security breaches.

In the event of a data breach that may affect your rights and freedoms, we are committed to notifying you within 72 hours, in compliance with GDPR requirements.

9. Cookies and tracking technologies

We use cookies and other tracking technologies to enhance the user experience on our site. These technologies allow us to personalize content, analyze the performance of our site, and provide you with a smoother browsing experience.

Types of cookies used:

• Essential cookies: Necessary for the functionality of our site (shopping cart, login, etc.).
• Performance cookies: Used to analyze user behavior and improve our services.
• Advertising cookies: Used to personalize the ads you see on our site and on other platforms.

You can manage your cookie preferences at any time by accessing our Cookie Policy.

10. Your rights regarding your personal data

Under applicable law, you have the following rights regarding your personal data:

• Right of access: To obtain a copy of the personal data we hold about you.
• Right of rectification: To correct any inaccurate or incomplete personal data.
• Right to erasure: To request the deletion of your personal data under certain conditions.
• Right to object: To object to certain processing, particularly for direct marketing purposes.
• Right to data portability: To receive your data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where possible.
• Right to restriction of processing: To request the restriction of processing of your personal data in certain cases.

You can exercise your rights by contacting us at the following address:

Address：37 Express，43 Rue de la Haie Coq 93300 Aubervilliers

Email：support@37-express.com

Phone：01 42 21 37 37

11. Changes to this privacy policy

This policy may be updated to reflect changes in our practices or to comply with legal developments. You will be notified of any significant changes by email or by notification on our website. We encourage you to regularly review this page to stay informed of any updates.

12. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please feel free to contact us:

Address：37 Express，43 Rue de la Haie Coq 93300 Aubervilliers

Email：support@37-express.com

Phone：01 42 21 37 37